Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

Active exploitation of this flaw has been observed in the wild. Apply the available patches as soon as possible.

The Ray Dashboard service running on the remote host is prior to version 2.52.0. It is, therefore, affected by a remote code execution vulnerability:

  - Ray's browser-based attack protection relies solely on checking that the User-Agent header starts     with 'Mozilla'. The Fetch specification allows Firefox and Safari to modify this header. When     combined with DNS rebinding attacks, a malicious website or advertisement visited by a developer     running Ray can execute arbitrary code on that developer's machine. (CVE-2025-62593)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version number, Ray is prior to 2.52.0. Therefore, it may be affected by a Remote Code Execution through a DNS Rebinding Attack.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool
    can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability
    is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent
    header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the
    fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack
    against the browser, and this vulnerability is exploitable against a developer running Ray who
    inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This
    issue has been patched in version 2.52.0. (CVE-2025-62593)

ID	Name	Product	Family	Type	Severity
342143	Ray < 2.52.0 Remote Code Execution (CVE-2025-62593)	Nessus	Artificial Intelligence	Remote	critical
115436	Ray < 2.52.0 Remote Code Execution	Web App Scanning	Artificial Intelligence	Version Based	critical
437184	SCA: security update for ray (GHSA-q279-jhrf-cc6v)	Tenable Cloud Security	SCA Checks	Local	critical
437184	SCA: security update for ray (GHSA-q279-jhrf-cc6v)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2025-62593

critical

Tenable Plugins

critical

critical

critical

critical